This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa File: 16466217-dced-4a5a-a70d-36ae6ab6acbe.roa (raw, json) Hash identifier: 8iaHfoncrX1ewq5pVr6tsyEHyarQ4hdR5bnNeA82vLE= Subject key identifier: 29:65:64:E1:E7:04:C1:38:32:A8:6E:48:62:D2:6C:06:2E:4C:E3:7D Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 554AB602EE5814933D40525F1DF817E5CFEB481D Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa Signing time: Tue 18 Nov 2025 00:40:03 +0000 ROA not before: Tue 18 Nov 2025 00:40:03 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.92.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4a:b6:02:ee:58:14:93:3d:40:52:5f:1d:f8:17:e5:cf:eb:48:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 18 00:40:03 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=9e8dd822a9328cd5600af36366b8e4ca25ad075805d68d8fc9e0b9b9846cb64a, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:b6:e3:70:2a:1c:c0:65:d5:76:38:38:8a: 99:c0:6d:9f:3d:52:74:48:51:be:b2:8c:fa:c5:a8: bf:f8:45:a5:8c:4b:7e:36:86:32:f4:30:82:b3:c1: b6:92:6d:63:8c:e7:6c:38:31:8e:40:e2:9b:42:05: 03:97:e0:44:cd:2a:21:77:01:8e:f4:79:72:48:ca: 72:2a:36:e9:50:eb:44:21:7b:f6:ad:97:43:2f:2b: 39:4c:62:4e:a3:dc:cb:4a:02:31:cd:c1:19:dc:a1: 8b:a3:dd:c4:dc:4b:c8:52:77:32:b0:81:43:e0:46: 93:82:b1:ae:48:4f:10:4e:84:fe:45:64:4b:00:e8: 81:3b:58:f6:3d:ee:f3:03:d4:6d:dc:08:ab:32:8a: 0e:cf:52:d1:93:b1:1c:97:9b:63:a2:44:a8:20:4d: fa:11:79:84:65:c3:df:fd:8b:98:4c:ff:b7:ed:3a: 12:0a:2b:9a:a8:0f:95:59:9f:fa:bf:68:39:df:a1: 35:7c:89:50:f6:45:7a:37:77:26:dc:01:7f:6c:1e: f8:8c:96:b5:74:49:f7:f8:ec:92:5e:00:65:aa:0c: ee:06:63:be:40:6c:19:45:d1:6e:7f:d2:62:d3:a8: d6:a5:4d:4d:a5:62:73:53:cc:5e:05:4a:79:02:68: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:64:E1:E7:04:C1:38:32:A8:6E:48:62:D2:6C:06:2E:4C:E3:7D X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.92.0.0/14 Signature Algorithm: sha256WithRSAEncryption 17:90:98:65:32:f7:c3:fb:91:de:9c:cd:86:ec:3e:24:1e:aa: 0b:b1:7a:27:63:67:c1:2d:17:d2:d9:21:33:50:0d:5e:de:62: d1:6c:c7:60:88:6d:28:bc:2a:1c:0d:9e:d9:6b:67:40:2d:81: 01:7c:70:e9:d4:d3:a2:63:cf:05:19:a8:ce:52:e1:1c:9f:c4: 0b:9d:9c:d9:cb:d6:e1:a4:6b:0d:42:52:e7:50:3f:bb:b5:8c: 71:65:f9:4c:12:83:06:f3:29:65:6b:9b:a6:2a:d1:59:fc:34: eb:a7:ce:75:15:e6:26:24:e0:13:5f:d4:25:60:1e:b4:e5:e8: f0:90:d5:8b:2c:40:b7:d8:13:44:41:7f:b4:81:7b:3b:c9:b6: 40:50:eb:15:6f:72:28:48:59:8e:85:1e:69:80:6f:8e:82:76: eb:70:46:80:a2:2e:70:c2:bf:fd:e3:1e:05:84:71:67:b6:ae: 24:27:92:1e:65:4e:e4:37:a7:00:e8:b8:73:f0:62:10:8b:02: 55:1e:14:b4:62:73:1e:08:3e:0d:19:85:70:b0:ad:a9:ab:a7: fe:e8:8c:ba:bb:c2:36:1b:41:ce:5a:71:eb:21:99:8a:fe:be: 25:12:9a:86:b3:d2:a8:f4:3d:42:c2:cf:ea:83:50:e8:ed:8b: 5d:85:fa:6b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUVUq2Au5YFJM9QFJfHfgX5c/rSB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTgwMDQwMDNaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDllOGRkODIyYTkzMjhjZDU2MDBhZjM2MzY2YjhlNGNhMjVhZDA3NTgwNWQ2 OGQ4ZmM5ZTBiOWI5ODQ2Y2I2NGExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKTtuNwKhzAZdV2ODiKmcBtnz1SdEhRvrKM+sWov/hFpYxLfjaGMvQwgrPB tpJtY4znbDgxjkDim0IFA5fgRM0qIXcBjvR5ckjKcio26VDrRCF79q2XQy8rOUxi TqPcy0oCMc3BGdyhi6PdxNxLyFJ3MrCBQ+BGk4KxrkhPEE6E/kVkSwDogTtY9j3u 8wPUbdwIqzKKDs9S0ZOxHJebY6JEqCBN+hF5hGXD3/2LmEz/t+06EgormqgPlVmf +r9oOd+hNXyJUPZFejd3JtwBf2we+IyWtXRJ9/jskl4AZaoM7gZjvkBsGUXRbn/S YtOo1qVNTaVic1PMXgVKeQJofbkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQpZWTh 5wTBODKobkhi0mwGLkzjfTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MTY0NjYyMTctZGNlZC00YTVhLWE3MGQtMzZhZTZhYjZhY2JlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjNcMA0G CSqGSIb3DQEBCwUAA4IBAQAXkJhlMvfD+5HenM2G7D4kHqoLsXonY2fBLRfS2SEz UA1e3mLRbMdgiG0ovCocDZ7Za2dALYEBfHDp1NOiY88FGajOUuEcn8QLnZzZy9bh pGsNQlLnUD+7tYxxZflMEoMG8ylla5umKtFZ/DTrp851FeYmJOATX9QlYB605ejw kNWLLEC32BNEQX+0gXs7ybZAUOsVb3IoSFmOhR5pgG+OgnbrcEaAoi5wwr/94x4F hHFntq4kJ5IeZU7kN6cA6Lhz8GIQiwJVHhS0YnMeCD4NGYVwsK2pq6f+6Iy6u8I2 G0HOWnHrIZmK/r4lEpqGs9Ko9D1Cws/qg1Do7Ytdhfpr -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:59 2025 by rpki-client